What we collect, and why.

Tally is a marketing agency based in New Zealand. This policy explains what personal information we collect through tallynz.co, why we collect it, and what we do with it. It is written to meet our obligations under the Privacy Act 2020.

If you are a client, the handling of information inside a paid engagement is governed by the agreement you signed with us. Where that agreement and this policy differ, the signed agreement applies.

Our enquiry form asks for the information we need to tell you honestly whether we can guarantee an outcome for your business:

• Your name, email address, company and role
• Your industry and approximate company size
• The outcome you want, your timeline, and whether budget is agreed
• Anything you write in the message field

The gated guarantee one-pager asks only for a name, work email and company. Everything on both forms is given voluntarily. If you would rather not fill in a form, email zak@tallynz.co or jonty@tallynz.co directly.

When you arrive from an ad, a search result or a link, we record the campaign parameters in that link, utm_source, utm_medium, utm_campaign, utm_term, utm_content, and the Google or Microsoft click identifiers, along with the page you landed on and the site that referred you.

This is held in your own browser under the key tally_attribution and is attached to a form only if you choose to submit one. It tells us which channels actually produce conversations. It contains no name, email or address.

We use Google Analytics 4 to understand how the site is used: pages viewed, approximate location derived from IP address, device and browser type, how you arrived, and interactions such as opening the one-pager or clicking through to book a call.

Analytics cookies are switched off until you accept them. On your first visit a notice appears at the bottom of the screen, and until you choose, Google Consent Mode holds analytics storage in a denied state: no analytics cookie is written and nothing is read from your device. Choosing Decline keeps it that way, and Google receives only a cookieless ping it cannot tie to a returning visitor.

We set no advertising cookies at all, and we do not use the site to build advertising audiences. IP addresses are anonymised before Google stores them.

Your choice is stored in your browser under tally_cookie_consent. To change it, clear this site's data in your browser and the notice will appear again. You can also block the cookies outright in your browser settings or install Google's opt-out browser add-on. The site works normally either way.

• To reply to your enquiry and prepare a proposal
• To send the document you asked for
• To work out which marketing channels are worth continuing
• To keep records we are required to keep

We do not sell personal information. We do not trade or rent contact lists. We do not use your enquiry to build a profile for anyone else, and we do not add you to a newsletter because you downloaded a document.

We use a small number of providers, each doing one job:

• Vercel: hosts and serves the website
• Resend: delivers your form submission to our inboxes as an email
• Google Analytics: usage measurement, as described above
• Calendly: only if you choose to book a call, and only the details you enter there
• Supabase: powers our internal staff portal. It holds no information about website visitors

Some of these store data on servers outside New Zealand. We only use providers that commit to protecting information to a standard comparable to the Privacy Act 2020.

Enquiries are kept for as long as we are in contact with you and for a reasonable period afterwards, so that we have a record of what was discussed and agreed. Attribution data in your browser is short-lived and is cleared when you clear your browser storage. If you want your enquiry deleted, ask and we will delete it.

Under the Privacy Act 2020 you may ask us what personal information we hold about you, ask for a copy, and ask us to correct anything wrong. Email zak@tallynz.co or jonty@tallynz.co and we will respond within 20 working days.

If you are not satisfied with how we have handled your information, you can complain to the Office of the Privacy Commissioner.

The site is served over HTTPS and form submissions are encrypted in transit. Our internal portal is restricted to named accounts and protected at the database level, so an account that has not been granted access cannot read anything. No system is perfectly secure, and we do not claim otherwise.

This site sells business services and is not directed at children. We do not knowingly collect information from anyone under 16.

If this policy changes we will update the date at the top of this page. Material changes will be described here rather than made quietly.

Questions about privacy, or a request about your information: zak@tallynz.co or jonty@tallynz.co. Our terms of service are at tallynz.co/terms.